Is Chocola safe?

Chocola is a simple, lightweight and open-source offline music player app for Android, using Material 3 Expressive. It's Very fast and snappy! Material 3 Expressive design! Built-in equalizer! Play any song from anywhere just by sharing the audio file to the app without downloading it! Easy search across all your music/albums/artists! Very fast and snappy! No unnecessary permissions needed! Black…

Developer: sosauce
Category: Multimedia
Earliest archived version: 26 Aug 2026
License: GPL-3.0-or-later (per IzzyOnDroid metadata)

02 / Package identity

Technical fingerprint

Application IDcom.sosauce.cutemusic

Latest APK SHA-256d1bcb8e8e3b52576f854a478336432dc76ab2d99996f44b176f64a9b839fc281

Signing certificate7A:D6:5A:BB:70:C3:B3:3D:0D:30:1A:FF:CE:F8:F1:C5:C2:2B:CA:DA:53:F7:70:FF:BE:66:DF:8D:33:05:83:35

MIN ANDROID28TARGET37ARCHITECTUREarm64-v8a · armeabi-v7a

03 / History

Archive history

5 versions in WIKI archive: earliest 4.4.1 (26 Aug 2026), latest 4.4.6 (16 Oct 2026).

No change in android.permission.* between 4.4.4 and 4.4.6.

04 / Version archive

Documented releases

5 TOTAL

VersionReleasedAndroidArchitecture

4.4.616 Oct 202628+arm64-v8a, armeabi-v7a→4.4.401 Oct 202628+arm64-v8a, armeabi-v7a→4.4.327 Sept 202628+arm64-v8a, armeabi-v7a→4.4.228 Sept 202628+arm64-v8a, armeabi-v7a→4.4.126 Aug 202628+arm64-v8a, armeabi-v7a→

05 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source

IntegritySHA-256 verified vs source

SourceBinary repo · izzyondroid

Permissions7 declared · 3 sensitive

Signaturepresent

Anti-featuresNo known anti-features

Sensitive accessREAD_EXTERNAL_STORAGEREAD_MEDIA_AUDIOWRITE_EXTERNAL_STORAGE

Declared permissions

android.permission.FOREGROUND_SERVICE android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK android.permission.READ_EXTERNAL_STORAGE android.permission.READ_MEDIA_AUDIO android.permission.WAKE_LOCK android.permission.WRITE_EXTERNAL_STORAGE com.sosauce.cutemusic.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Tracker status: Not assessed by WIKI for Android.

06 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗